org.opensocial.explorer.server.login

Class GoogleLoginServlet

java.lang.Object

javax.servlet.GenericServlet

javax.servlet.http.HttpServlet

org.apache.shindig.common.servlet.InjectedServlet

org.opensocial.explorer.specserver.servlet.ExplorerInjectedServlet

org.opensocial.explorer.server.login.LoginServlet

org.opensocial.explorer.server.login.GoogleLoginServlet

All Implemented Interfaces:

Serializable, javax.servlet.Servlet, javax.servlet.ServletConfig

public class GoogleLoginServlet
extends LoginServlet

A servlet that handles requests for logging in via Google OAuth, including handling login callbacks from the Google Authorization server.

 GET googleLogin/popup
 - This endpoint is reached from the client-side popup when the user clicks login. 
 - This servlet sends back a redirect to Google's login and authorization page.
 
 GET googleLogin/token
 - The callback URL from Google after the user has accepted or declined authorization.
 
 - If the user has declined, Google returns an error parameter in the callback URL.
 1. In this case, we return some javascript code that closes the popup.
 
 - If the user has accepted, Google returns a one-time auth code parameter in the callback URL.
 1. In this case, we make a POST back to Google with the auth code, and injected app information.
 2. Google will then return a JSON with an encrypted ID Token in exchange for the one time auth code.
 3. We unencrypt and verify this token using a Google's Java API to make sure the token is authentic.
 4. Once authenticated, we take the user ID from the token and generate a security token with it.
 5. Lastly, we return the security token client-side via some javascript, where it is also stored locally.
 

See Also:

Serialized Form

Field Summary

Fields inherited from class org.opensocial.explorer.server.login.LoginServlet

clientId, clientSecret, codec, CONTAINER, contextRoot, fetcher, redirectUri

Fields inherited from class org.opensocial.explorer.specserver.servlet.ExplorerInjectedServlet

HTML_CONTENT_TYPE, JSON_CONTENT_TYPE

Fields inherited from class org.apache.shindig.common.servlet.InjectedServlet

initialized, injector

Constructor Summary

Constructors

Constructor and Description
GoogleLoginServlet()

Method Summary

Methods

Modifier and Type	Method and Description
protected void	doGet(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp)
void	injectDependencies(String clientId, String clientSecret, String redirectUri, org.apache.shindig.common.servlet.Authority authority)

Methods inherited from class org.opensocial.explorer.server.login.LoginServlet

closePopup, injectDependencies, returnSecurityToken

Methods inherited from class org.opensocial.explorer.specserver.servlet.ExplorerInjectedServlet

getPaths, getRequestBody, parseResponseToJson, parseResponseToString, splitQuery

Methods inherited from class org.apache.shindig.common.servlet.InjectedServlet

checkInitialized, init

Methods inherited from class javax.servlet.http.HttpServlet

doDelete, doHead, doOptions, doPost, doPut, doTrace, getLastModified, service, service

Methods inherited from class javax.servlet.GenericServlet

destroy, getInitParameter, getInitParameterNames, getServletConfig, getServletContext, getServletInfo, getServletName, init, log, log

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

GoogleLoginServlet

public GoogleLoginServlet()

Method Detail

injectDependencies

@Inject
public void injectDependencies(String clientId,
                             String clientSecret,
                             String redirectUri,
                             org.apache.shindig.common.servlet.Authority authority)

doGet

protected void doGet(javax.servlet.http.HttpServletRequest req,
         javax.servlet.http.HttpServletResponse resp)
              throws javax.servlet.ServletException,
                     IOException

Overrides:

doGet in class javax.servlet.http.HttpServlet

Throws:

javax.servlet.ServletException

IOException